I have read about this remote management console that you can install, on say a laptop, and still control all of FEP. I have found the install MSI and have run it, takes about 3 secs, but now I can't find it on the machine. How do i open the console? It would be nice not to have to remote into the SCCM server everytime I need to check something in FEP.

Hi,

As FEP is integrated with SCCM 2007 what you need to do is to intall SCCM Admin Console +R2/R3 release and then install the FEP Management Console Extension.

Then you will be able to manage both SCCM and FEP from your laptop.

Regards,
Jrgen

Where would I find the admin console for SCCM?

Hi,

It is inluded in the Installation Source for SCCM 2007, so either a DVD or an ISO; you can download it from Microsoft Volume Licensing site as well if you don't have it somewhere.

Regards,
Jrgen

I have the ISO, but I don't know where to look for the remote console. What is it called? I don't want to re-download the whole server onto my laptop.

Hi Mike,

Thank you for the post.

The admin console is just the SCCM 2007 installation option, please read articles below:

How to Install the Configuration Manager Console
Prerequisites for Installing Forefront Endpoint Protection on a Server

If there are more inquiries on this issue, please feel free to let us know.

Regards

Okay, I found it and have installed the console following the instructions given above, but when I open it I get denied access to the ConfigMgr site database. The exact error is as follows:

The ConfigMgr console could not connect to the ConfigMgr site database. Verify that this computer has network connectivity to the SMS Provider computer and that your user account has Remote Activation permissions on both the ConfigMgr site server and the SMS Provider computers. For more information, see "How to Configure DCOM Permissions for Configuration Manager Console

Details:

Access is denied. (Exception from HRESULT:0x80070005 (E_ACCESSDENIED))

I followed the steps outlined at 'How to Configure DCOM Permissions for Configuration Manager Console Connection' for giving me remote activation permissions, but still can't connect. How do I know if I have the permissions on the SMS Provider computers, I don't even know where they would be. I thought that they were the SCCM server, but maybe they're something else altogether?

Hi Mike,

Please add the user to Distributed COM Users local group on your site server.
Moreover, check the firewall if WMI TCP port 135 opened or other suggestions in thread below.

http://social.technet.microsoft.com/forums/en-US/configmgradminconsole/thread/b1a6ba2f-bc54-43f0-b269-f462cdf4230b
http://social.technet.microsoft.com/Forums/en-US/configmgradminconsole/thread/94c2af2c-e84c-450d-978b-65923ec2b079

Regards

Okay, now we're almost there. I got it to connect, but the remote console is not showing any of the collections I've created on the server. Shouldn't I be able to see them? Once I got the console open I reran the FEP console install, but it didn't install anything.

Hi,

Did you install R3 after the installation of the SCCM admin console?

There are a hotfix as well that is a pre-req, they are listed here: http://technet.microsoft.com/en-us/library/3cd9a4c2-88e8-40e6-aba4-3780b76bb202#BKMK_FEPConsolePrerequisites

regards,
Jrgen

It does not allow me to. I get this message:

Microsoft System Center Configuration Manager 2007 R3 requires Configuration Manager 2007 QFE KB977384

I assume that I would just run the install the same as I did for the R2?

Hi,

Are you using R2 or R3 installed on the SCCM server? If you are using R3 you should install it as well on the workstation, before installing R3 you need to install the hotfix required by R3:http://support.microsoft.com/kb/977384

regards,
Jrgen

I am using R3. I have installed the hotfix and R3 on my laptop, but still it does not show the collection from my server and the FEP console doesn't show up after rerunning the install for it either.

Hi Mike,

Please ensure the user has the Configuration Manager administrative rights. You could achieve it via copy rights from an existing user or group.
http://technet.microsoft.com/en-us/library/bb680648.aspx

Regards

That did it, now all of my collections show up. I still can't get the FEP console to show though.

Hi Mike,

Now the SCCM console is OK. Please install KB2271736 and FEP console extension via FEP ISO.

http://technet.microsoft.com/en-us/library/ff823830.aspx

Regards

Awesome that did it. It's a bit of a pain and very picky about the order, but it is working thank you very much.

Rick, 

I looking for the same remote management console solution for Endpoint but for System Center Endpoint Protection 2012 that is installed in SCCM 2012 with R2. What would be the steps to accomplish this?